414 matches found
CVE-2019-19563: Undefined Security Weakness
A misconfiguration in the debug interface in Mercedes-Benz HERMES 2.1 allows an attacker with direct physical access to device hardware to obtain cellular modem information...
CVE-2019-19556: Undefined Security Weakness
An authentication bypass in the debug interface in Mercedes-Benz HERMES 1 allows an attacker with physical access to device hardware to obtain system information...
CVE-2019-19562: Improper Authentication
An authentication bypass in the debug interface in Mercedes-Benz HERMES 2.1 allows an attacker with physical access to device hardware to obtain system information...
PT-2020-10189
Name of the Vulnerable Software and Affected Versions Mercedes-Benz HERMES version 1.5 Description A misconfiguration in the debug interface allows an attacker with direct physical access to device hardware to obtain cellular modem information. Recommendations For Mercedes-Benz HERMES version 1.5...
PT-2020-10191
Name of the Vulnerable Software and Affected Versions Mercedes-Benz HERMES version 2.1 Description A misconfiguration in the debug interface allows an attacker with direct physical access to device hardware to obtain cellular modem information. Recommendations For Mercedes-Benz HERMES version 2.1...
PT-2020-10188
Name of the Vulnerable Software and Affected Versions Mercedes-Benz HERMES version 1.5 Description The issue is related to an authentication bypass in the debug interface, allowing an attacker with physical access to the device hardware to obtain system information. This could also involve a...
PT-2020-10187
Name of the Vulnerable Software and Affected Versions Mercedes-Benz HERMES version 1 Description A misconfiguration in the debug interface allows an attacker with direct physical access to device hardware to obtain cellular modem information. Recommendations For Mercedes-Benz HERMES version 1,...
PT-2020-10190
Name of the Vulnerable Software and Affected Versions Mercedes-Benz HERMES version 2.1 Description An authentication bypass in the debug interface allows an attacker with physical access to device hardware to obtain system information. Recommendations For Mercedes-Benz HERMES version 2.1, conside...
Gigadevice GD32VF103 Firmware Extraction Vulnerability
The Gigadevice GD32VF103 is a Mega Easy microcontroller device. The Gigadevice GD32VF103 Flash Readout Protection suffers from a firmware extraction vulnerability that can be exploited by a physically capable access attacker to submit a special request to obtain firmware from the debug interface...
CVE-2020-13465
The security protection in Gigadevice GD32F103 devices allows physical attackers to redirect the control flow and execute arbitrary code via the debug interface...
CVE-2020-13467
The flash memory readout protection in China Key Systems & Integrated Circuit CKS32F103 devices allows physical attackers to extract firmware via the debug interface and exception handling...
CVE-2020-13463
The flash memory readout protection in Apex Microelectronics APM32F103 devices allows physical attackers to extract firmware via the debug interface and exception handling...
CVE-2020-13464
The flash memory readout protection in China Key Systems & Integrated Circuit CKS32F103 devices allows physical attackers to extract firmware via the debug interface by utilizing the CPU or DMA module...
CVE-2020-13468
Gigadevice GD32F130 devices allow physical attackers to escalate their debug interface permissions via fault injection into inter-IC bonding wires which have insufficient physical protection...
CVE-2020-13469
The flash memory readout protection in Gigadevice GD32VF103 devices allows physical attackers to extract firmware via the debug interface by utilizing the CPU...
Memory corruption
The flash memory readout protection in Gigadevice GD32F103 devices allows physical attackers to extract firmware via the debug interface by utilizing the DMA module...
Memory corruption
The flash memory readout protection in China Key Systems & Integrated Circuit CKS32F103 devices allows physical attackers to extract firmware via the debug interface by utilizing the CPU or DMA module...
Memory corruption
The flash memory readout protection in Apex Microelectronics APM32F103 devices allows physical attackers to extract firmware via the debug interface and exception handling...
Design/Logic Flaw
The security protection in Gigadevice GD32F103 devices allows physical attackers to redirect the control flow and execute arbitrary code via the debug interface...
Design/Logic Flaw
Gigadevice GD32F130 devices allow physical attackers to escalate their debug interface permissions via fault injection into inter-IC bonding wires which have insufficient physical protection...